Werk #5254: Event console: Introduced syslog application placeholder which can be used in rewriting events
| Component | Event Console | ||||||||||||||
| Title | Event console: Introduced syslog application placeholder which can be used in rewriting events | ||||||||||||||
| Date | Dec 13, 2017 | ||||||||||||||
| Level | Trivial Change | ||||||||||||||
| Class | New Feature | ||||||||||||||
| Compatibility | Compatible - no manual interaction needed | ||||||||||||||
| Checkmk versions & editions |
|
When rewriting text, hostname or application for an event you can now use the new placeholders
Message text regex match groups
- $MATCH_GROUPS_MESSAGE_1$
- $MATCH_GROUPS_MESSAGE_2$
- $MATCH_GROUPS_MESSAGE_n$
Syslog application regex match groups
- $MATCH_GROUPS_SYSLOG_APPLICATION_1$
- $MATCH_GROUPS_SYSLOG_APPLICATION_2$
- $MATCH_GROUPS_SYSLOG_APPLICATION_n$
Note: The syslog application match groups are now also considered when canceling events. The previous version did only check for identical create/canceling match groups in the event message text.